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(57) ABSTRACT 

Disclosed is an method and apparatus for configuring an 
H.323 compliant data packet network with a registering 
function whereby home based users are identified separate 
from visiting users having other networks as home bases. 
Thus user location data may be retrieved and/or modified as 
those users roam to other H.323 compliant networks and 
register with a gatekeeper at that visited network. The 
registration of a visiting user with a visited gatekeeper 
includes the process of assigning a transient identity to the 
roaming user, obtaining confirmation from the home gate- 
keeper that roaming is authorized and registering the roam- 
ing users present address and transient identity at the home 
site so that calls received at the home network can be 
directed to the user at the visited site. 
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METHODS AND SYSTEMS FOR CALL PACKET BASED MULTIMEDIA COMMUNICATIONS 

FORWARDING SYSTEMS", H.235 entitled "SECURITY AND ENCRYP- 

TION FOR H SERIES (H.323 AND OTHER H.245 
TECHNICAL FIELD BASED) MULTIMEDIA TERMINALS" and H.245 entitled 

The present invention relatesin general to the interne, and 5 " 1 S^^J^^^^ J ™^ A °?T U " 

in particular to methods and systems for accommodating NICATIONS". The H.225.0. H 235 and H.245 standards are 

roaming endpoint users across H.323 compliant network ^ incorporated herein by reference, 

domains. To date, the standards and the industry practice have been 

directed to communications between users accessing termi- 

BACKGROUND 10 nals at known locations in their home network. While 

The internet comprises an interconnected set of networks generally, users must check the network to see if any 

where the individual networks may use various protocols communications are being held for the user, systems exist 

within a specific network but which use standardized inter- "^notify a user that to™ * ™* he mailbox when a 

net protocols (IP) for communicating with other networks. „ ™ s ^™mal is ^urned ON. Further, if the user s terminal 

„„ ., , . ....... r. 15 is already turned ON, a display or a speaker of a terminal can 

While the internet started wuh the idea of transmitting ^ ^ ^ ^ fl communication> whether electronic 

only text, the protocol has expanded to many types of media mail or a voice call ta being rece ived. The H.323 standard 

including voice, video and other graphs The commumca- refcrcQced above includes voice and other muhimedia ca i ls 

tion is in the form of packets of data and thus there is no M an(J completed between a H .323 compliant terminal 

solid or fixed connection as is the case with the public 20 and whefe ^ H ^ ^ 

switched telephone network system (PSTN). In general, ^ ^ m ^ ^ „ home „ netwofk 
when an mternet user wants to communicate with another 

user, the sending party transmits a message to the internet are 0 " en required to trave to remote sites for 

service provider (ISP) of the recipient. The recipient obtains « tended P 6nods of ll ™ and al * 6 «mote site may 

the communication when he next accesses the ISP and 25 have access <° a te l m ' nal °» a d ' ffereD ' ne , tw ° rk from hat 

requests any previously unreceived messages. Two way users home network It would be desu-able to have a system 

communication of either voice or text requires an advance method for automatically and seamlessly forwarding 

arrangement on the part of both the sending party and the volce and . other communications originally directed to a 

recipient to be accessing the internet and using the appro- isers terminal at a home ne^ork, to a terminal at the remote 

• f * i site after a user contacts a home network and forwarding is 

" ^ ' . 4 . 30 authorized. While such an action would be comparable to 

In an attempt to simplify internet communication rQ ^ ^ technologV; me differences 

problems, various standards have been formulated and ^ ^ of ^ mternet and lhe telephone 

adopted in the industry. These standards are followed when m t direct OTnelation m processes to accom . 

cm&^SS^C^^S^ M Plishsuchauthorizationandforwardingofcommunicauons. 

CATIONS SYSTEMS" which is incorporated herein by SUMMARY OF THE INVENTION 
reference. Standard H.323 covers the technical requirements 

for multimedia communications systems in those situations The present invention is directed to the method of and 

where the underlying transport is a packet based network apparatus for completing multimedia calls over a packetized 

(PBN) which may not provide a guaranteed quality of 40 data transmission link to a roaming user currently located in 

service (QoS). The H.323 standard covers not only calls a network foreign to the users home network, 

between H.323 compliant terminals in remotely located DDTCC ncc!ri)1DTrnM n c rue noAWiwrc 

H.323 compliant networks, but also covers calls between DESCRIPTION OF THE DRAWINGS 

such terminals and telephones in switched circuit systems p or a more complete understanding of the present 

such as the PSTN. For the purposes of this invention, a call 45 invention, and its advantages, reference will now made in 

is defined as a multimedia communication between two tne following Detailed Description to the accompanying 

terminals at least one of which is H.323 compliant. The call drawings, in which: 

may comprise the use of a collection of channels between pIG. 1 is a is a general block diagram of the present 
terminal endpoints some of which channels may be "unre- invention- 
liable". In accordance with terminology in the art, a "reli- 50 ' .„ t t f 
able" channel uses a protocol mat keeps track of the number FIG 2 illustrates, ma tunc sequence diagram form, a 
andorderofmessagessentandreceivedsothatthereceiving methodology of registering a visaing terminal or user ,n a 
endpoint knows when data packets are missing or received foreign networ , 

out of order. An unreliable channel merely delivers message FIG. 3 illustrates, in a time sequence diagram form, a 

packets as well as it can but requires the sending program to 5 s methodology of obtaining location information of a roamed 

worry about whether or not any messages are received at the party; and 

destination and whether or not received messages are FIG. 4 illustrates, in a time sequence diagram form, a 

received in the proper order. As will be obvious to one methodology of communicating an admission request as an 

skilled in the art, an unreliable channel will normally pro- initial step in contacting a roamed party, 

vide much faster communications of a given quantity of data 60 cn nccnDItrrfOM 

than would a channel that must also continually communi- UblAlLbU Ub5>LKUMiuiN 

cate data tracking messages. In FIG. 1 the reference numeral 10 refers to a first H.323 

Such a call as defined herein begins with a call setup compliant network domain while a second H.323 compliant 

procedure and ends with a call termination procedure. Other network domain is given a designation of 12. The network 

examples of standards applicable to calls incorporating the 65 domain 10 includes a gatekeeper 14 connected via a bus 16 

internet are H.225.0 entitled "CALL SIGNALING PROTO- to many other components some of which are shown. 

COLS AND MEDIA STREAM PACKET! ZATI 0 N FOR Endpoints 18 and 20 are two out of potentially many 
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endpoint terminals connected to bus 16 the others of which message to gatekeeper 44 requesting registration. This mes- 
are not shown. A plurality of gateways 22, 24 and 26 are also sage includes the terminal alias for terminal 42, a current IP 
shown connected to bus 16. A block 28, which includes the address and an VU and/or endpoint authentication token, 
functions of both a gateway and an internet protocol (IP) This message would include data equivalent to "I am 
router (R/GW), is interconnected between bus 16 and a 5 joe@networkA.com" and "my RAS address is 
packet data network generally indicated as 30. The block 30 1.2.3.4:10050" and "my call signalling address is 
may be the Internet, an intranet or any other packet data 1.2.3.4:2500". The gatekeeper 44 then assigns a transient 
transmission means for supplying data between domain 10 identity, such as VU501 to visiting endpoint 42 and forwards 
and network domain 12. The domain may also contain a the request along with a visited gatekeepers authentication 
multi-point control unit (MCU) such as shown for block 32. 10 token ^ the assigned transient identity to the home gate- 
Domain 12 includes a combination router and gateway ke °Pf r m whic t h f is , sh ° wn in FIG ' } wc ?! d ^ 
block 34 which provides the interconnection between a bus gatekeeper 14. The visited gatekeeper must be able to 
36 of domain U and the network 30. As illustrated, a d « te ™ ** t ho ™ and/or gatekeeper from he 
plurality of endpoints 38, 40 and 42 are connected to bus 36. ^ ^formation sent by the terminal 42 to the visited 
Agatekeeper44islikewiseconnectedtobus36.Thedomain 15 ftekeeper 44, otherwise the » legistntira leqiiest could not 
12 would also be likely to have further gateways, not shown, b * f ™ f °™ request must be 
in a manner similar to that of domain 10. f orwarded 10 lhe home g^keeper is that the visited gate- 

. , , keeper has no means for ascertaining whether or not the user 

Gateway 22 is shown connected to the public switched operating endpoint 42 is authorized to roam to network 12. 

telecommunication network or PSTN and designated as 46 However the primary purpose for sending the registration 

which is shown having a pair of PSTN compliant endpoint request tQ the home network is to identify the visited 

devices 48 and 50 connected thereto. Devices 48 and 50 nctwork md the address where the home network should 

would typically be ordinary computer telephone modems COfltact the yisited network to deliver calls t0 the roam i ng 

and their associated computer terminals along with required u&er ^ each of thc gatekeeper5 such as 44 must ma intain 

voice equipment such as speakers and a microphone. Gate- a listing or database regisler of the networks, such as 

way 24 is shown connected to an asynchronous transmission networkA , mat are authorized to send roaming users to 

mode (ATM) network 52 having a pair of endpoints 54 and net workB. Likewise, gateway 44 must keep a separate list of 

56 connected thereto. Gateway 26 is connected to an ISDN netW orks to which networkB users may be allowed to roam 

network 58 and has a pair ISDN compliant endpoints 60 and in ^ eyent ^ me associated aet work roaming agreements 

62 connected to communicate with other devices such as an ^ afe nQt rec iprocaL 

endpoint within the domain 10 or PSTO 46. 30 when ^ home gatekeeper 14 receives the rcgistration 
The portions of FIG. 1 described thus far could be request, it examines the authentication token sent by end- 
considered to represent a prior art communication system. pomt 42^ the presence of a roaming alias or transient identity 
As will be noted however gatekeeper 14 has connected as assigned by visited keeper 44 (and possibly the IP address 
thereto a visiting location register (VLR) 64 and further has 35 of me sen ding entity). This examination causes the gate- 
a home location register (HLR) 66. The gatekeeper 44 has keeper 14 to determine that the request is not a standard 
similar VLR and HLR boxes 68 and 70. While the VLR and registration request and that further processing is required by 
HLR functions may readily be incorporated within a gatekeeper 14. The home gatekeeper 14, upon determining 
gatekeeper, these blocks are shown external for ease in mat tQe registration request is for a user (joe) that has 
discussing the function and operation of same. As will be 4Q roame d from networkA, needs to update the gatekeepers 
realized, the gatekeeper boxes 14 and 44 further include information database by storing the assigned transient iden- 
software for providing the added functions necessary to tity (VU501) and the visited gatekeeper data so that future 
register visiting users, assign transient identities, forward communications can be forwarded to gatekeeper 44 in 
incoming communications to the last known location of a networkB. Home gatekeeper 14 uses the authentication 
roaming endpoint user and to update storage registers 64 45 token supp ii e d by gatekeeper 44 to verify that the commu- 
through 70. For the purpose of describing the operation of n j C ation did actually come from the visiting network and 
the invention, endpoint 42 has been further designated as was not f orge d by a "hacker" or other impersonator of 
VU for visiting user. The visiting user (VU) may bring that ano ther network. Once the identity of the visited network is 
users own terminal for connection to network 12 or may use established, additional determinations are made by gate- 
an existing terminal on the network and want to have 5Q kee p e r 14, that visited networkB is an appropriate network 
communications, initially directed to his home network, to wn i cn user ytj can roam . Home gatekeeper 14 uses the 
forwarded to endpoint 42. It may be understood, for this authentication token supplied by the VU for endpoint 42 in 
description, that the VU has network 10 as that users home combination with the alias supplied by the roaming user to 
network and gatekeeper (GK) 14 as a home gatekeeper. ver j fv tnat tne re q U est is from a user and/or terminal end- 
While FIG. 1 may typically be understood to represent a 55 point registered at the home network and not from an 
situation where network domains 10 and 12 are physically impersonator of that user. Further, the home gatekeeper 14 
separated by a great distance, the invention is also applicable may check its registers to see where the roaming user was 
to two different zones within a single network wherein each last known to be located so that deregistration messages may 
of the zones has a different gatekeeper. be sent to the gatekeeper controlling the previously visited 

The H.323 protocol mentioned above requires that an 60 site, 

endpoint terminal, of a network, register with the gatekeeper Once the home gatekeeper 14 has completed updating its 

of that network. The registration would normally occur registers 64 and 66, it may return a registration confirmed 

whenever a terminal such as 42 is activated but also may be (RCF) or a registration reject (RRJ) message to the visited 

required on a periodic basis in the design of some networks. gatekeeper. It may be assumed for the purposes of this 

Thus, and as shown in FIG. 2, the visiting user sends a 65 description that the home gatekeeper 14 determines that the 

registration request to the visited gatekeeper 44 in net- VU for terminal 42 is authorized to roam and thus re turns the 

workB. Referring to FIG. 1, endpoint 42 would send a confirmation message to gatekeeper 44. The visited gate- 
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keeper 44 may filter part of the received data before return- As will be apparent, the ARQ or LRQ messages for the 

ing a confirmation message to visiting user endpoint 42. roaming user at EP42 could be received from a calling party 

A calling endpoint may send an H.323 standardized within home network 10, from the visited network 12 or 

location request (LRQ) message to the home gatekeeper 14 from non-H.323 compliant EPs such as a terminal connected 

of a roaming user, as shown in FIG. 3. This message will s to block 60 which is an ISDN compliant endpoint. 

include an alias corresponding to the roaming user (i.e. ^ ^own l0 mose skilled in the art, the enure procedure 

"Joe"). The GK 14 will check the HLR 66 and retrieve that ^ ^^ly detailed in the referenced H.323 specification 

transient identity or roaming alias assigned by the visited fof initiating a voice (or otner multimedia) call including 

GK 44 for tha^ roaming use r. A new LRQ message will then obtaini fc and basing the connec- 

be sent from GK 14 to visited GK44 Tte vstol GK 44 wfl J0 P ^ Qf ^ ^ ^ remaini ^ be 

check tot terminal s VLR 68 to determ ne if VU501 s tiU J ^ ^ ificatioQ md the 

refers to Joe at EP 42 and that Joe sUll has a curren lementatioQ wiu also be obvious based on the signal 

registration Jf the regism £ in HQS 2 tfa h 4 ^ on] irement is 

^fX?^ bC T * 1 T that the data packets coming into the home network for the 

received by GK 14 is malformed or otorw^e improper ^he 1$ f P ^ ^ network for d 

LRQ might not even be forwarded to GK 44 In to «^ ^ ^ ^ be ^ home 

instance, the GK 14 would just return a LRJ to the calling must fee ^ ^ ^ m6 ^ be made 

endpoint. me v ^j tec j nctW0 rk for instructions on where to direct 

It is assumed in this FIGURE however that the visiting ketfi tQ the visiled networkt 

user at EP 42 is still in good standing. In this situation, 20 r r 

. ■ r *• u ii • „«r„„ In summary, this invention allows a H.323 compliant user 

appropnate address information such as a call signaling «i»u± j, f. 

trJnsport address and any appropriate aliases are returned * ™* H- 323 ^P 1 ^ 1 QC ^ ork that 15 K "*' 

fromGK44 toGK14. GK 14 may screen or otherwise filter *?**Y that "«« home p^eeper. After arnvmg at he 

,« j 4 . , . f , T oc '™ f ^ orir i tll( . n visited network, the roaming user registers with a visited 

the data received in the LCF message irom OK 44 and then ' . f ~ . , . 

, i . ii- j • « A „ „ -ii u a gatekeeper. The visited gatekeeper authorizes the registra- 

send a LCF to the requester or calling endpoint. As will be &H****y™- *«v B r to 

t • * i i • f , a * * *„Jn*A * n Uon by determining the network of the roaming user and that 

obvious to network designers, the data returned to the calling " & . vu « n j 

Tu ♦ ii iu mtoAiUm.rrh t\Z a roaming agreement exists between the visited and home 

party may be limited so that calls must be routed through the , . . , , , t . . a 

i y y , , u ■ • tU ^Z^* network. This is accomplished by contacUng the home 

home catekeeper rather than giving the calling endpoint , iL * u * 

uuuit gaiuRvcpvi &* & ;„ * or c.^u gatekeeper which in turn authorizes the request as being 

enough data to place a caU from a authenticated network with which it allows roaming, 

^ h *™y temm ^ rf ^ to n ^*^° f ^ 30 ^ me roami user k t0 roam , ^ that , he 

reasons. One reason for routing all calls through to GK is ^ and an (m allthen . 

that by destgn, the gatekeeper is required to monitor the 1 autho^ation is returned, the roaming 

content, of all calls received by given users. usef ^ receive ^ ag directed , he 

Another H.323 standards message rece.ved by gate- ^ of ^ bom6 aQ(J gatckeeper . sincc the 

keepers is an admission request (ARQ) as shown in FIG 4. 35 interaction between gatekeeper and tbe forwarding of data 

As occurred in FIG. 3. the request would contain an alias fa tfa 6Qt t0 the ^ thc callcr n6ed nol eve n 

such as Joe@networkA^This would correspond to the ^ ^ ^ nas roamed (0 a differeQt Qetwork 

roaming user at EP 42. GK 14 would check ite database and ^ ^ be nt from ^ aboye> ^ caUing 

obtain the corresponding roaming alias VU501 from HLR need no( be of aQ jj 323 CO mpUant network but 

66. GK 14 would forward a request to GK f using the 4Q ^ ' tQ haye capability l0 caU to a H .323 compliant 

stored roaming alias or transient identity assigned by GK 44. j^^k 

This request from GK14 to GK44 would normally be an " . . . 

LRQ 2ough certain circumstance occur, and as set forth Further functions of the system may include advising 

in H.323, where it would be appropriate to send an ARQ. Piously visited gatekeepers that a user has again roamed 

„' , . , .„„ ,„ , c „„,„ when a home gatekeeper detects a previous roaming status 

An H.323 endpoint sends an ARQ message to its gate- 45 a RRQ is received from a presently visited 

keeper before placuig or receiving a call in order o receive eke Sucb ^ cs are nQt n6eded jn 

perm.ssxon from the gatekeeper to use the netwo k to t P whefe ^ ' .^J^ r 

receive information regarding where signaling should be r ':^ r . iiot . s ^ re i ative i v sho rt 

established and to obtain other useful information used in re-registrations is relatively short. 

establishing communication with the other endpoint (such 50 Although the invention has been described with reference 

as: aliases, lists of gateways to use, authentication tokens to «o specific embodiments, these descriptions are not mean to 

pass through network gateways, and so forth). In the present be construed in a limiting sense Various modifications of the 

case, an H 323 endpoint inside the home network domain ^closed embodiment*, as well as alternative embodiments 

may wish to call a user who happens to be served by the of the invention, will become apparent to persons skilled in 

home network and the user is roaming. In this instance, the ss f J™ reference to the description of the invention. It 

calling endpoint is interested in obtaining the address where a therefore, contemplated that the claims will coyer any 

it should send call signaling to ultimately reach the roaming s^h modifications or embodiments that fall within the true 

user, and the permission aspects are not pertinent. scope and spirit of the invention. 

The visiled GK 44 would return an address in the appro- 7 hat 15 claimed is: 

• , . ™ c .• o,™. „« i„ ihr „L ,,n 1- A method for establishing a user in a foreign network 

pnate ACF or LCF confirmation message as to the appro- 60 & ^ 

priate port address where the call signalling should be composing the steps of: 

established to communicate with the roaming user VU at EP sending a user registration request to a visited gatekeeper, 
42 The home GK 14 screens the address information and wherein the user registration request includes at least 
returns location information to the requestor when all signals one of a terminal alias and an authentication token; 
are valid. As before, an LRJ or admission reject (ARJ) may 65 forwarding registration request data from the visited gate- 
be returned from GK 14 to the requester if the terminal 42 keeper to a gatekeeper in a home network for authen- 
is not presently registered or there is some other error. tication by said home network, wherein the registration 
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request data forwarded by said visited gatekeeper 
includes at least one of a visited gatekeeper authenti- 
cation token and a roaming alias; and 
returning a registration confirmation message from said 
home network to the user that requested registration in 
the foreign network, wherein the registration confirm 
message is passed through said visited gatekeeper 
before being received by the user requesting registra- 
tion. 

2. Apparatus for establishing a user in a foreign data 
packet network comprising: 

home gatekeeper means comprising a part of a home 

network domain; 
visited gatekeeper means; 

packet data transmission means interconnecting said 
home gatekeeper means and said visited gatekeeper 
means; 

terminal means logically connected to said gatekeeper 
means; 

means for sending a visiting user registration request to 
said visited gatekeeper means including at least a 
current internet protocol (IP) address and data sufficient 
to identify the visiting user and that visiting users home 
network domain; 

means for forwarding registration request data from said 
visited gatekeeper means to said home network domain 
for authentication by said home gatekeeper means; and 

means for returning a registration confirm message from 
said home gatekeeper means to the user that requested 
registration in the foreign data packet network. 

3. A method of directing communications to users roam- 
ing between gatekeeper managed networks interconnected 
by packetized data networks comprising the steps of: 

maintaining a list of visiting users that have requested 

registration in a given visited network; 
supplying data from a home network, in response to a 

request, authorizing a visited network to forward 

incoming communications to a visiting user; 
storing data in the home network relative to the most 

recently known visited location of a roaming user; and 
forwarding communications, initially directed to a home 

network address, to the most recently known visited 

location. 

4. Communication apparatus comprising: 
local and foreign domain network means; 
packetized data communication means interconnecting 

said local and foreign domain network means; 
means for registering each network users current location; 
means for assigning home identities to a user that identify 

a users home domain network; 
means for assigning transient identities to a roaming user; 

and 

means for setting up calls between said local and foreign 
domain network means. 

5. Apparatus as claimed in claim 4 comprising in addition: 
means for authenticating a roaming user currently located 

in a foreign network as being a user registered in a local 
home network that is authorized to roam. 
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6. A method for establishing a user in a foreign network 
comprising the steps of: 

sending a user registration request to a visited gatekeeper, 
wherein the user registration request includes at least 
one of a terminal alias and an authentication token; 

forwarding registration request data from the visited gate- 
keeper to a gatekeeper in a home network for authen- 
tication by said home network; and 

returning a registration confirmation message from said 
home network to the user that requested registration in 
the foreign network. 

7. A method for establishing a user in a foreign network 
comprising the steps of: 

sending a user registration request to a visited gatekeeper; 

forwarding registration request data from the visited gate- 
keeper to a gatekeeper in a home network for authen- 
tication by said home network, wherein the registration 
request data forwarded by said visited gatekeeper 
includes at least one of a visited gatekeeper authenti- 
cation token and a roaming alias; and 

returning a registration confirmation message from said 
home network to the user that requested registration in 
the foreign network. 

8. A method for establishing a user in a foreign network 
comprising the steps of: 

sending a user registration request to a visited gatekeeper; 

forwarding registration request data from the visited gate- 
keeper to a gatekeeper in a home network for authen- 
tication by said home network; and 

returning a registration confirmation message from said 
home network to the user that requested registration in 
the foreign network, wherein the registration confirm 
message is passed through said visited gatekeeper 
before being received by the user requesting registra- 
tion. 

9. The method of claim 1, comprising the additional step 



of: 
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including, in the user registration request, at least a 
current internet protocol (IP) address and data sufficient 
to identify the user and said home network. 

10. The method of claim 1, comprising the additional step 



of: 
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updating stored data accessed by said home network as to 
a transient identity of the user requesting registration. 

11. The method of claim 1, comprising the additional step 

of: 

updating a "roamed" databank with a gatekeeper contact 
for the user requesting registration. 

12. The method of claim 1, comprising the additional 
55 steps of: 

updating a roamed databank with a gatekeeper contact for 

the user requesting registration; and 
notifying any previously visited gatekeeper listed in the 
60 roamed databank for the user to deregister said user. 
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